Commit Graph

  • 7b2d72aaf0 ssl: replace PSA_ALG_ECDSA with MBEDTLS_PK_ALG_ECDSA Valerio Setti 2025-09-08 13:36:08 +02:00
  • 0009b042ac library: ssl: replace mbedtls_pk_can_do_ext with mbedtls_pk_can_do_psa Valerio Setti 2025-07-30 22:51:53 +02:00
  • 64d4c3675a Merge pull request #1424 from gilles-peskine-arm/pkcs7-padding-error-timing-leak-cveid-3.6 Gilles Peskine 2025-09-16 16:10:56 +02:00
  • 4fe3760a27 Cleanup following the removal of MBEDTLS_BIGNUM_C option Ronald Cron 2025-09-15 18:45:46 +02:00
  • feb5e26619 Cleanup following the removal of MBEDTLS_ECP_DP_.*_ENABLED options Ronald Cron 2025-09-15 18:36:39 +02:00
  • 6cfab2880a Cleanup following the removal of MBEDTLS_ECP_C option Ronald Cron 2025-09-15 18:32:29 +02:00
  • 2ad1e5c1a2 Cleanup following the removal of MBEDTLS_ECJPAKE_C option Ronald Cron 2025-09-15 18:30:07 +02:00
  • 3c6bbddfd4 Cleanup following the removal of MBEDTLS_ECDSA_C option Ronald Cron 2025-09-15 18:28:06 +02:00
  • a19ee2819e Cleanup following the removal of MBEDTLS_ECDH_C option Ronald Cron 2025-09-15 18:25:06 +02:00
  • 919a1e4e22 Cleanup following the removal of RSA legacy options Ronald Cron 2025-09-15 14:39:26 +02:00
  • 2b7f59535f Remove completely MBEDTLS_PLATFORM_GET_ENTROPY_ALT Ronald Cron 2025-09-15 14:03:35 +02:00
  • 0dd31fe523 Introduce MBEDTLS_SSL_NULL_CIPHERSUITES Ronald Cron 2025-09-10 09:37:46 +02:00
  • e6240f14ee Merge pull request #10403 from ronald-cron-arm/fix-readthedocs-build Ronald Cron 2025-09-16 11:59:29 +00:00
  • e5eb2639b2 readthedocs: Install cmake to build the documentation Ronald Cron 2025-09-09 15:19:48 +02:00
  • 2ba5d6afcc Update tf-psa-crypto Ronald Cron 2025-09-16 11:18:04 +02:00
  • 9c2727f9f2 Update framework Ronald Cron 2025-09-02 14:43:01 +02:00
  • d1244932f1 We have a CVE ID Gilles Peskine 2025-09-16 10:39:29 +02:00
  • c2b94d45d4 Merge pull request #10401 from gilles-peskine-arm/psa_can_do-declare-publicly-3.6 Gilles Peskine 2025-09-15 12:02:50 +00:00
  • 07912c9e36 Merge pull request #10370 from bjwtaylor/remove-deprecated-compilation-options Manuel Pégourié-Gonnard 2025-09-15 09:26:01 +00:00
  • 753036edb3 Merge pull request #10336 from gilles-peskine-arm/generated-files-lib-build-3.6 Janos Follath 2025-09-12 13:27:26 +00:00
  • 1a81ab6390 Merge pull request #10379 from bjwtaylor/update-header-guards Manuel Pégourié-Gonnard 2025-09-12 10:03:02 +00:00
  • 14e1932935 Remove stray comment int components-platform.sh Ben Taylor 2025-09-12 10:52:10 +01:00
  • 5a7a72ee41 testing with analyze_outcomes changes reverted for merge Ben Taylor 2025-09-09 07:54:47 +01:00
  • 5496f9025c Temporarily revert changes to config.py Ben Taylor 2025-09-08 08:25:35 +01:00
  • bb877a8cbf remove further references to MBEDTLS_SHA256_USE_A64_CRYPTO_IF_PRESENT and MBEDTLS_SHA256_USE_A64_CRYPTO_ONLY Ben Taylor 2025-08-21 14:27:49 +01:00
  • 9a5444a3b8 Fix copypasta Gilles Peskine 2025-09-12 11:24:12 +02:00
  • 6e1b66320a Improve documentation Gilles Peskine 2025-09-11 18:34:29 +02:00
  • 447134b704 Announce psa_can_do_cipher() Gilles Peskine 2025-09-11 17:05:40 +02:00
  • 3aee15b8e5 Declare psa_can_do_cipher() in a public header Gilles Peskine 2025-09-11 17:04:44 +02:00
  • 0d530d191f Merge pull request #10294 from bjwtaylor/remove-static-ecdh Manuel Pégourié-Gonnard 2025-09-12 09:20:03 +00:00
  • c1e76e04fe correct whitespace style issue Ben Taylor 2025-09-12 08:33:38 +01:00
  • 486ec6e9b6 Improved the text in the Changelog Ben Taylor 2025-09-11 13:21:52 +01:00
  • 485d4c1343 reverting last commit as the tests cause failures Ben Taylor 2025-09-11 13:14:10 +01:00
  • 26cdf6ee2b Re-adding tests for ECDH Ben Taylor 2025-09-11 07:52:53 +01:00
  • 2f3523313b Add ChangeLog Ben Taylor 2025-09-10 09:08:50 +01:00
  • 59474406a6 Re-instate MBEDTLS_PKCS1_V15 unset Ben Taylor 2025-09-10 08:47:12 +01:00
  • 337161eb41 Remove comment referencing ECDH Ben Taylor 2025-09-10 08:39:41 +01:00
  • df3e595536 Re-instate test for correctness of sent single supported algorithm Ben Taylor 2025-09-10 08:30:12 +01:00
  • 5cdbe30804 replace MBEDTLS_KEY_EXCHANGE_SOME_NON_PFS_ENABLED with MBEDTLS_KEY_EXCHANGE_PSK_ENABLED Ben Taylor 2025-09-08 13:12:43 +01:00
  • 9e360b8f33 Remove MBEDTLS_RSA_C from depends.py Ben Taylor 2025-09-05 09:09:28 +01:00
  • a47fd0faf4 Add bug link to test modifications Ben Taylor 2025-09-04 10:34:24 +01:00
  • 1a4f4b32a4 Add filter to test_tls13_only_ephemeral_ffdh to remove ffdh tests Ben Taylor 2025-09-04 10:13:09 +01:00
  • 120bd868b6 add filter to component_full_without_ecdhe_ecdsa Ben Taylor 2025-09-03 15:33:46 +01:00
  • 8371674048 re-add TLS_VERSION derivation Ben Taylor 2025-09-03 08:16:52 +01:00
  • f57293654e Revert change to Everest test message back to ECDH Ben Taylor 2025-09-02 13:10:52 +01:00
  • 4766a23f9c change MBEDTLS_KEY_EXCHANGE_SOME_NON_PFS_ENABLED to MBEDTLS_KEY_EXCHANGE_PSK_ENABLED Ben Taylor 2025-09-02 08:26:07 +01:00
  • c8823a262d Remove MBEDTLS_KEY_EXCHANGE_SOME_ECDHE_ENABLED as it appears to be causing issues Ben Taylor 2025-08-18 14:17:19 +01:00
  • 7b14d8228e Reverting TLS_VERSION derivation improvement, as it appear to be causing issues Ben Taylor 2025-08-18 10:45:00 +01:00
  • a7b3f26864 reverted change to MBEDTLS_KEY_EXCHANGE_SOME_NON_PFS_ENABLED, as it appears it could be causing issues Ben Taylor 2025-08-15 09:31:17 +01:00
  • 677994af64 Change ecdh to ecdhe on everest test Ben Taylor 2025-08-15 08:22:04 +01:00
  • 59213b66df Re-add everest test, as it was mislabelled Ben Taylor 2025-08-14 10:01:06 +01:00
  • 6f0eb79111 Use get_tls_version to determine TLS_VERSION instead of statically assigning it Ben Taylor 2025-08-14 08:37:23 +01:00
  • b191c02f6b Correct style issues Ben Taylor 2025-08-14 08:28:42 +01:00
  • e16798ec67 Re-add reference to PSA_WANT_ALG_ECDH as this will be mantained Ben Taylor 2025-08-14 08:25:11 +01:00
  • 0fe02bb1bf Removed TLS1_2_KEY_EXCHANGES_WITH_ECDSA_CERT as it is no longer used Ben Taylor 2025-08-14 08:20:03 +01:00
  • 844a264317 Remove stray MBEDTLS_PKCS1_V15 and MBEDTLS_PKCS1_V21 Ben Taylor 2025-08-14 08:10:55 +01:00
  • b2f6a69d85 Replace MBEDTLS_KEY_EXCHANGE_SOME_ECDHE_ENABLED with MBEDTLS_KEY_EXCHANGE_SOME_ECDH_OR_ECDHE_1_2_ENABLED Ben Taylor 2025-08-14 08:08:00 +01:00
  • 013f8aee4e Replace MBEDTLS_KEY_EXCHANGE_PSK_ENABLED with MBEDTLS_KEY_EXCHANGE_SOME_NON_PFS_ENABLED Ben Taylor 2025-08-14 08:03:57 +01:00
  • 1d651cc8a1 Remove additional occurances of static ECDH symbols Ben Taylor 2025-08-12 14:24:49 +01:00
  • a1914ef453 further removals of ssh tests from ssl-opt Ben Taylor 2025-08-12 11:56:04 +01:00
  • fbd806ae95 Remove everest ECDH test as it is no longer required Ben Taylor 2025-08-12 11:41:20 +01:00
  • 5802394451 Remove further ECDH testd from ssl-opt.sh Ben Taylor 2025-08-12 08:20:07 +01:00
  • 0a7c5588db Remove further ECDH tests Ben Taylor 2025-08-11 14:43:32 +01:00
  • dbf3977107 Remove tests from ssl-opt.sh that are depedendent the removed ECDH algorithm's Ben Taylor 2025-08-11 11:22:50 +01:00
  • 39280a4110 Remove ECDH from ssl-opt Ben Taylor 2025-07-30 13:43:21 +01:00
  • 3116f2febe Remove further symbols Ben Taylor 2025-07-30 10:48:45 +01:00
  • 4d7f715c07 Remove further symbols that are not required Ben Taylor 2025-07-23 09:56:11 +01:00
  • 50b45a98ce Reverted changes to config-split Ben Taylor 2025-07-17 10:43:05 +01:00
  • 558766d814 Remove additional ifdef's Ben Taylor 2025-07-11 08:37:22 +01:00
  • 15f1d7f812 Remove support for static ECDH cipher suites Ben Taylor 2025-07-10 09:41:09 +01:00
  • 3e59e0ae08 Merge pull request #1411 from mpg/bypass-wrappers Manuel Pégourié-Gonnard 2025-09-11 12:25:23 +02:00
  • c6b28b31ef Be explicit about modinv output range Manuel Pégourié-Gonnard 2025-09-11 09:58:45 +02:00
  • 414878aa7f Merge pull request #10393 from ronald-cron-arm/entropy-rng-clean-up David Horstmann 2025-09-10 17:12:40 +00:00
  • 9a10e398fa Simplify footprint.sh Ronald Cron 2025-09-10 17:08:12 +02:00
  • b01be14907 Fix footprint.sh Ronald Cron 2025-09-10 12:01:52 +02:00
  • ab7610c318 Cleanup following the removal of entropy options Ronald Cron 2025-09-03 10:02:03 +02:00
  • eb16a9d9ea Prepare for the removal of MBEDTLS_PLATFORM_GET_ENTROPY_ALT Ronald Cron 2025-09-03 09:57:29 +02:00
  • 3b30643143 Adapt configurations to stricter compile-time checks Ronald Cron 2025-09-02 18:30:08 +02:00
  • efcec8cecd Cleanup following the removal of MBEDTLS_ENTROPY_C option Ronald Cron 2025-09-02 17:22:35 +02:00
  • 7e8ca26c81 Merge pull request #10396 from valeriosetti/update-tfpsacrypto Ronald Cron 2025-09-10 10:32:26 +00:00
  • 82bf414d25 framework: update reference Valerio Setti 2025-09-10 10:54:37 +02:00
  • 1ce0ad089d tf-psa-crypto: update reference Valerio Setti 2025-09-10 10:07:38 +02:00
  • e5210e0968 Merge pull request #10371 from ronald-cron-arm/remove-legacy-ecc-crypto-options Ronald Cron 2025-09-09 13:26:27 +00:00
  • f46aee2603 Merge pull request #1406 from gilles-peskine-arm/pkcs7-padding-error-timing-leak-3.6 Janos Follath 2025-09-08 16:33:22 +01:00
  • 008326f08b Merge pull request #10386 from davidhorstmann-arm/upgrade-python-packages David Horstmann 2025-09-08 15:32:12 +00:00
  • fb7eba06b0 Merge pull request #10387 from davidhorstmann-arm/upgrade-python-packages-3.6 David Horstmann 2025-09-08 15:31:46 +00:00
  • 5df9d9d53e ssl-opt.sh: Fix dependency on ECDSA Ronald Cron 2025-08-18 15:04:22 +02:00
  • a450affbca Fix MBEDTLS_SSL_TLS1_2_SOME_ECC definition Ronald Cron 2025-07-24 21:59:52 +02:00
  • cc908ad04c Remove redundant memset on freshly initialized buffer Gilles Peskine 2025-08-25 17:01:34 +02:00
  • 2d666646ba Changelog entry for PSA CBC-PKCS7 padding oracle fix Gilles Peskine 2025-08-07 23:07:31 +02:00
  • 04dfd70432 psa_cipher_decrypt: treat status and output length as sensitive Gilles Peskine 2025-08-07 22:27:26 +02:00
  • 3b380daedb psa_cipher_finish: treat status and output length as sensitive Gilles Peskine 2025-08-07 21:59:07 +02:00
  • e74b42832e Return PSA_ERROR_INVALID_PADDING in constant time Gilles Peskine 2025-07-27 21:29:40 +02:00
  • d179dc80a5 Use mbedtls_psa_cipher_finish() in PSA Gilles Peskine 2025-07-27 18:57:04 +02:00
  • d3e182e7da Add BUFFER_TOO_SMALL testing Gilles Peskine 2025-08-07 21:25:23 +02:00
  • b6b1a8299b Factor API calls into auxiliary functions Gilles Peskine 2025-08-07 20:28:34 +02:00
  • bba5d7c439 Add constant-time AES-CBC encrypt and decrypt tests through PSA Gilles Peskine 2025-07-27 18:10:01 +02:00
  • 9d7d0e63ae Merge pull request #1407 from gilles-peskine-arm/mbedtls_cipher_finish_padded-3.6 Gilles Peskine 2025-09-08 12:18:50 +02:00
  • 943c291f59 Merge pull request #10390 from gilles-peskine-arm/threading-3.6-alt-doc Gilles Peskine 2025-09-08 09:50:16 +00:00
  • 85cf16dd96 Merge pull request #10388 from gilles-peskine-arm/threading-1.0-mutex-init-mbedtls-preliminary Gilles Peskine 2025-09-08 09:49:43 +00:00